Slow RD connection to server via RD Gatway if NLA is disabled on the server

Question

If I disable NLA on a server (tried on 2 different servers), the rd connection (via gateway only) is much slower (over 1 min to get to the logon screen).
RD Gateways are 2012R2, hosts are 2012 and 2012 R2.
Re-enabling NLA fixes the issue. Any ideas?
Dario Palermo

Answer 1

Hi Dario,
Putting the gatewayusagemethod:i:1 in the .rdp file will force the RD Client to use the gateway always and thus speed up the connection time. When connecting from the Internet, as a test, please uncheck Bypass RD Gateway server for local addresses in the RD
Client options--Advanced tab--RD Gateway settings.
Please try “Require user authentication for remote connections by using Network Level Authentication” policy setting under below path.
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Configure Network Level Authentication for Remote Desktop Services Connections
https://technet.microsoft.com/en-us/library/cc732713.aspx
Addition you can check for “Network security: LAN Manager authentication level”
https://technet.microsoft.com/en-us/library/cc738867(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]